Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a…
Author: Cybernoz
PhantomBuffer: Effective EDR Evasion Through Stealth Injection
I. INTRODUCTION During red teaming or penetration testing, we often need to perform stealth injection between processes. To do so, we must avoid detection…
CVE-2023-34362 RCE vulnerability in MOVEit Transfer exploited in the wild: everything you need to know
On May 31, 2023, Progress published details of a critical remote code execution (RCE) 0-day vulnerability in MOVEit Transfer being exploited in-the-wild (CVE-2023-34362). CVE-2023-34362 was…
TruConfidence: Why Your Patch Automation Can Finally Be Autonomous
TruConfidence: The AI-Powered Remediation Intelligence & Orchestration engine powering TruRisk Eliminate 2.0 delivers autonomous remediation at scale with proof at every step. Executive Summary Vulnerabilities…
The Flax Typhoon gets a cold front.
An international coalition disrupts Chinese state-backed hacking operations. Officials dismantle cybercrime centers in Ghana. Anthropic launches initiatives aimed at quicker remediation. A maximum-severity SonicWall vulnerability…
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. AUR is a community-maintained,…
Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords
A campaign against government organizations and state-linked infrastructure used AI-assisted scripts to steal credentials, maintain access to Linux servers and seek sensitive data, according to…
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and targets developer workstations…
Fastfetch 2.70.0 changes how Disk free space is reported
Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch…
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as…
AI tool used in asylum case reviews failing accuracy tests
An artificial intelligence (AI) tool introduced to speed up the processing of asylum claims has been found to make errors during Home Office testing. The…
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns Pierluigi Paganini October 17, 2026 India’s CERT-In warns AI agents accessed confidential data undetected, while attackers…